Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
File: wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft (raw, json)
Hash identifier: 6cCBIM8M4ZFX/Lb01RJmtmMlmNmylbjEX4wWQel+UN0=
Subject key identifier: 24:CA:B3:AB:38:04:B3:F9:47:FC:66:03:F7:28:15:FE:2E:EB:B7:CE
Authority key identifier: C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
Certificate issuer: /CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Certificate serial: 01A0D3156F6F919CAB6F9249C5F0A4077794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
Manifest number: 0D77
Signing time: Thu 24 Sep 2026 11:03:12 +0000
Manifest this update: Thu 24 Sep 2026 11:03:12 +0000
Manifest next update: Fri 25 Sep 2026 11:03:12 +0000
Files and hashes: 1: 4PTC5yonsD66cRWhOfMvXT_tH58.asa (hash: 3QXmn0TZ/e4qfakjgP0NwVoV2OWY88L6f6SOhDogWPo=)
2: aPQErA1H1tvLKOM_S7Xvs0Zudg0.roa (hash: YgDV6lSWXJsx/Tra+FgUOmYQqBP8G4F9S/WJqO8pRPM=)
3: wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl (hash: oI7OYAbOY/c2Li9YCyaPjWbMKBK33Cb/3jwclcPgd/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:6f:6f:91:9c:ab:6f:92:49:c5:f0:a4:07:77:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Validity
Not Before: Sep 24 11:03:12 2026 GMT
Not After : Sep 25 11:03:12 2026 GMT
Subject: CN=24cab3ab3804b3f947fc6603f72815fe2eebb7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:a3:5e:78:b1:41:fd:19:3b:4d:55:e1:2f:
8b:ec:d8:37:63:24:15:07:0d:a8:dd:39:2a:42:ca:
5e:48:5b:9c:3a:f5:70:ec:69:b3:43:1e:20:f4:7b:
8c:e2:71:21:72:79:48:41:64:18:15:c0:52:25:2b:
b4:a4:ad:7c:17:bf:98:c6:bd:fa:8c:55:d3:69:37:
6e:7d:f9:df:e8:c9:b4:ad:bd:27:e5:25:87:a7:1b:
5c:d4:77:5b:ae:77:d6:12:82:bd:fd:f2:6b:97:e7:
7f:a2:c3:3f:18:b1:07:3a:a5:70:b3:27:91:44:b5:
88:20:14:3f:ad:de:06:39:7e:0e:b4:f8:60:78:b8:
36:f4:92:90:1e:bd:a9:0b:0f:b7:3c:fc:01:ef:fd:
fc:c3:c2:21:51:fa:c0:9c:98:63:1d:83:ff:1a:31:
36:9c:5d:52:ad:14:77:18:c6:98:ab:5b:91:17:6f:
47:81:36:3c:f3:f4:dd:e8:52:30:35:d1:1e:31:34:
0d:97:ec:5f:aa:03:46:d1:30:8f:e1:6b:75:c1:5b:
b7:92:c8:35:b8:82:55:ce:4d:91:8a:ed:be:59:04:
be:d4:f0:79:13:69:cf:31:f0:0d:d3:15:e7:fb:ad:
44:92:0f:a3:ee:88:83:0c:a4:fc:1c:00:e6:34:d8:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CA:B3:AB:38:04:B3:F9:47:FC:66:03:F7:28:15:FE:2E:EB:B7:CE
X509v3 Authority Key Identifier:
keyid:C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:24:49:39:7f:79:6f:1c:c6:f3:ed:89:32:e3:3a:6a:0a:fc:
11:ec:ec:5d:74:14:51:5b:b0:7b:8d:e5:48:89:e8:8f:7c:8d:
35:43:84:88:0d:cf:dc:96:2e:7c:b0:ab:4f:76:62:59:87:4d:
f6:7c:9a:70:35:83:45:5f:93:db:cd:ef:b5:3f:99:25:71:eb:
fa:5a:df:b6:1f:2a:33:01:58:9d:4f:44:0c:e5:ec:fe:de:0a:
67:1a:75:f5:27:41:5f:44:65:4b:a0:24:05:6d:48:e1:92:36:
5f:61:7b:81:34:99:89:5d:33:2a:18:c5:79:d7:97:13:48:ce:
e3:9b:29:8f:ce:8b:a4:9d:38:10:2d:b9:8f:ae:56:90:56:f6:
af:86:a8:e4:b4:15:98:c1:c3:b3:8e:97:43:1e:d7:c7:10:9e:
d9:e6:ce:4c:e5:98:a6:bd:ac:19:35:b5:71:0f:26:b8:eb:a0:
90:e8:57:35:c7:b0:79:e7:a3:e9:d9:fd:4b:35:c0:1b:25:bc:
4a:9c:99:1a:13:b8:0f:56:24:e5:9e:56:ae:44:dc:9c:81:1b:
45:b9:a0:39:de:a7:9c:a7:60:02:a7:19:36:ba:14:2f:de:17:
2a:cb:15:62:96:68:16:42:d4:11:9c:0a:9c:2b:4d:d6:f9:37:
0e:f8:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:19:37 2026 by rpki-client